Chaos Synchronization with Dynamic Filters: Two Way is Better Than One Way 
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Two chaotic systems which interact by mutually exchanging a signal built from their delayed 
internal variables, can synchronize. A third unit may be able to record and to manipulate the 
exchanged signal. Can the third unit synchronize to the common chaotic trajectory, as well? If 
all parameters of the system are public, a proof is given that the recording system can synchronize 
as well. However, if the two interacting systems use private commutative filters to generate the 
exchanged signal, a driven system cannot synchronize. It is shown that with dynamic private filters 
the chaotic trajectory even cannot be calculated. Hence two way (interaction) is more than one way 
(drive). The implication of this general result to secret communication with chaos synchronization 
is discussed. 
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Chaos synchronization is one of the most intriguing 
phenomena in the wide field of synchronization. On one 
hand a chaotic system is very unpredictable, and two 
chaotic systems, starting from almost identical initial 
states, end in completely uncorrelated trajectories 
On the other hand, two chaotic systems which are cou- 
pled by some of their internal variables can synchronize 
to a common identical chaotic motion 0, 0] . This phe- 
nomenon has attracted a lot of attention, mainly because 
of its potential for secure communication. A secret mes- 
sage can be modulated on the chaotic signal of a sender, 
and a receiver with an identical system which is driven 
by the modulated signal can decrypt this message [1, Q . 
In fact, communication with chaos synchronization has 
recently been demonstrated with semiconductor lasers 
which were synchronized over a distance of 120 km in 
a public fiber network . 

Such a unidirectional configuration, a sender A is driv- 
ing a receiver B, is susceptible to an attack. A third unit 
E, which is coupled to the transmitted signal, can syn- 
chronize as well, provided it has identical parameters. 
Therefore, a bi-directional configuration has been sug- 
gested where two chaotic units interact and synchronize 
by their mutual signals [7|, |8| . In this driven unit 

E responds differently to the signal than the two inter- 
acting partners A and B. This opens the possibility for 
public encryption protocols. Although an attacker knows 
all parameters of the system and although he can record 
any transmitted signal, he cannot decrypt the secret mes- 
sage. 

This kind of public encryption relies on the fact, 
that two chaotic systems A and B synchronize by bi- 
directional interaction whereas a third unit E which is 
only driven by the transmitted signal cannot synchro- 
nize. However, it is not obvious that this is possible, at 
all. On one hand, the two mutually coupled chaotic sys- 
tems influence the dynamics of each other and can accel- 
erate the synchronization by enhancing coherent moves, 
whereas the unidirectionally coupled system, a listener. 



cannot influence the synchronization process. On the 
other hand, the listener is allowed to record the ex- 
changed signals and to manipulate the recorded signals, 
without affecting the synchronization process In fact, 
Taken's theorem provides a mathematical proof that it 
is possible to reconstruct the complete chaotic trajectory 
from the transmitted signal [lo|. Hence, in principle an 
attacker may be able to calculate the chaotic trajectory. 
In practice, however, it may be difficult to achieve per- 
fect synchronization, in particular for realizations with 
semiconductor lasers 0, But the main problem of 
nonlinear dynamics remains: Is it possible that two in- 
teracting chaotic units synchronize whereas a third unit 
which is driven by the transmitted signal cannot syn- 
chronize? Note that the two partners are not allowed to 
exchange any secret information; the attacker E knows 
all the details which A knows about the system of B and 
vice versa. 

The question raised before - in short " Is two-way bet- 
ter than one-way?" - is addressed in this Letter. First, for 
identical partners which synchronize by a bi-directional 
signal we prove that an attacking chaotic unit can syn- 
chronize, as well. However, for non-identical partners 
which use private commutative filters we show that two 
interacting units can synchronize whereas a driven unit 
can neither synchronize nor calculate the synchronized 
trajectory from the transmitted signal. 

We differentiate between two possible types of unidi- 
rectional listeners: hardware listeners and software lis- 
teners. A hardware listener consists of a similar chaotic 
setup to those of the synchronized chaotic partners, 
whereas a software listener is capable to record and to 
mathematically manipulate the recorded signal. 

We start with a proof that a hardware listener is pos- 
sible for any identical chaotic units which interact by 
exchanging a function of some of their internal variables. 
This function may be nonlinear and may contain delayed 
variables. For simplicity, we consider the simple case of 
iterated chaotic maps, but the proof holds for ordinary 
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differential equations with delay, as well. Consider two 
partners and . Their dynamics is controlled by a 
general self-feedback function / and a general coupling 
function g which are both nonlinear functions of the his- 
tory T steps back 



xt = .f{xt) + g{xf) 
xf ^f{xf )+g{xt) 



(1) 



where Xt = {xt-i, ■■, Xt-r)- Since the coupling is sym- 
metric, these equations may be transformed to the cen- 
ter of mass of the partners, dt = ^{xf — xf) and 
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), which gives 



2dt = f{st + dt) - f{st - dt) + g{st - dt) - g{st + dt){2) 

where 2dt is actually the distance between x^ and x^ 
and is also a measure of their synchronization. Linear 
expansion for small dt gives 



dt = ^stf ■ dt - ^st9 ■ dt 



(3) 



The dynamics of the listener, xf ^ is influenced by both 
transmitted signals from x^ and x^ , and he compensates 
the two received signals by subtracting the same amount 
from its own signal 



xf ^f{xf)-g{xf)+g{xt)+gixf) 



(4) 



The distance between the listener and the partner x^, 
for instance, is defined by et = xf — xf . Applying the 
same transformation as above and linear expansion for 
small et give 



(5) 



The comparison between (jS]) and (O indicates that both 
dynamics are governed by the same conditional Lyapunov 
exponents, which implies that the listener will synchro- 
nize together with the partners. Hence, there is no ad- 
vantage in mutual coupling over unidirectional coupling 
when dealing with transmitted signals which are an iden- 
tical public function of the output of the deterministic 
chaotic maps. 

The hardware listener, defined by Eq. ([4]), is able to 
synchronize to the two interacting units A and B, a soft- 
ware listener is not required for this case. 

But now we extend the configuration, Eq. ([1]), to the 
case of non-identical units x^ and x^ . Both units are 
using different functions gA and gs, and the two trans- 
mitted signals are gsixf) and gA{xf). These functions 
are private, only x^ knows gA and x^ knows gs, and 
they commute, gAigsix)) = gB{gA{x))- Since a listener 
does not know these functions, he cannot use them for 
his hardware attack. On the other side, when the two 
partners x^ and x^ are synchronized, xf = xf , they 
receive an identical drive gAigsixf))- In the following 
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FIG. 1: A setup of two time-delayed, mutually coupled units, 
where each unit has a filter influencing both transmitting and 
receiving signals. 



we use linear filters for the two functions g. Do the two 
chaotic units x^ and x^ synchronize in this case? 

This question is answered below by one of the simplest 
chaotic maps, the Bernoulli map, and with linear filters. 
Without filters, the dynamics of the two mutually cou- 
pled units xf and xf can be analyzed analytically and 
is given by 

<i = (1 - e)f{xf) + e[nfixtr) + (1 - «)/(^f-.)] 



^t+i 



(1 - e)fixf) + e[Kfixf_,) + (1 - K)fixt^)] 



(6) 



where f{x) = (ax) mod 1. The parameter e indicates 
the weight of the delayed terms, k stands for the strength 
of the self-coupling term and a Bernoulli map is chaotic 
for a > 1. Note that [0, 1] is the allowed range for e and 



K. A linear expansion of the distance dt 



to 



dt+i = (1 — e)adt + ea{2K — l)dt 



leads 



(7) 



By assuming that the distance converges/diverges expo- 



nentially in time, dt 



it is possible to find an ex- 



pression for the largest conditional Lyapunov exponent 
[1^ [ist . We find that the largest Lyapunov exponent is 
negative and synchronization is achieved for 



1 2ae 

< K < 



1 - a 



(8) 
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as is depicted in figure ^a). 

Now each partner adds a filter at the end of the com- 
munication channel. The most simple commutative filter 
one can consider is convolution. Although this is a sim- 
ple linear procedure, we show that both hardware and 
software listeners fail to synchronize. 

The transmitted signal is now defined by 

r,^-^ = gAA^f''') - E Klsfixt''.) (9) 

where Kj^, e [0, 1] are the private keys (filters) cho- 
sen randomly by each one of the partners, and v = 
0, 1, . . . , - L We demand that J^^^^^ K'^ g = 1, in 
order to ensure that the transmitted signal is limited by 
[0,1]. Before arriving to the other end of the channel, 
the transmitted signal T encounters the second filter and 
the received signal is 



JV-l 



Rt = 9B,A[Tt ) 



E KXfi4-^.-,)- (10) 
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These quantities ' drive the units B and A, respec- 
tively. For the case of iV = 2, equation (fTO| yields 



A.B-, 



(11) 



Where a = KaKb, fi = Ka{1 - Kb) + Kb{1 - Ka), 
and 7 = (1 — Ka){1 — Kb)- For such a configuration the 
equations of dynamics are given by 

xt,, = (1 - e)f{xt) + enfixtr) + e{l - n)Rt, 
xf^, = {\-e)f{xf)+enf{xtr)+e{l^^)Rtr 

Similarly to the case without filters, we calculate an ex- 
pression for the largest Lyapunov exponent and examine 
the regime of synchronization. Since the values of the 
private keys Ka^ Kb are random, wc calculate the prob- 
ability of achieving synchronization in the phase space 
of (e, k) by sampling random sets of keys. In figure [2] 
we compare the regimes of synchronization for the basic 
setup with the lack of filters (a) and static-filters setup 
(b). We found that even in this case, the regime of syn- 
chronization is almost unchanged, and in addition, there 
exists a large fraction of the phase space where synchro- 
nization is achieved with a probability close to 1. 
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FIG. 2: Analytic results for the fraction of the phase space, 
(e, k), where synchronization is achieved for a Bernoulli map 
with r = 40 and a = 1.5. (a) With the absence of filters, 
synchronization is achieved only in the red regime, (b) The 
probability to synchronize in the phase space in the case of a 
static filters with N — 2. 

The synchronization time, t synch, is determined by 
simulations and is found to scale with the parameters 
{t,Ka,Kb) as 



t 



synch T 



(13) 



High values of keys, Ka,Kb 1, correspond to the 
case of no filters, {a ^ 1 and /3,7 — ^ 0), and ensure 
fast synchronization that grows almost linearly with r, 
^{Ka,Kb) ^ I- As we decrease the values of the keys 
we find that £,{Ka, Kb) increases, indicating a longer 
synchronization time. In figure [3] we present tsynch as 
a function of r for different regimes of {Ka,Kb)- In 
figure [21^ a) , Ka,Kb G (0.89,0.91) therefore we find an 
almost linear linear dependence ^ ~ 1.07. In figure [31[b), 



FIG. 3: Synchronization time vs. r (a) Ka,Kb £ (0.89,0.91) 
(b) Ka,Kb G (0.59,0.61). The solid lines were obtained by 
linear regression indicating ^ ~ 1.07, 3 for (a) and (b), re- 
spectively. 



Ka,Kb G (0.59,0.61) and we find a much slower syn- 
chronization time, ^ ~ 3. 

To ensure synchronization for iV 3> 1 we found that 
the strengths of the filter coefficients have to follow a 
power-law 



K%K^B^ 



(14) 



where G\ ^ is a random number between [0, 1], and the 
dynamic equations are 



il-e)f{xt)+SKf{xt^) + 



N-l 



+ e{l-^) ^ K-^K^f{xf_,_^) (15) 



and similarly for x^j^. The largest eigenvalue can be 
found only semi-analytically, by assuming that the dis- 
tance between the partners converges/diverges exponen- 
tially with time and then solving the characteristic poly- 
nomial numerically. Results indicate that the fraction of 
the phase space, (e, k), where synchronization is achieved 
does not alter as a function of the length of the key, N, as 
long as the keys decay as a power-law, Eq. (fT4|) . and (j) is 
large enough (see figure S]). However, the fraction of the 
phase space where synchronization is achieved is strongly 
dependent on the interplay between the two parameters 
of the coupled Bernoulli maps, a and (f), see figureH) The 
semi-analytic solutions confirmed by simulation results 
indicate that the interplay between a and cj) where syn- 
chronization is achieved can be described as follows. For 
a < Qc ^ 1.7, synchronization is independent of 4>. For 
a > Gc, synchronization is achieved only above a critical 
value (/)c(a). 

We now turn to discuss the capabilities of different 
types of listeners coupled unidirectionally. A hardware 
listener is eavesdropping on the transmitted signals from 
both partners and in order to synchronize he must imitate 
one of the filters, {K'^} or {K'^}. Since these values are 
private keys of each of the partners, he will not be able 
to recover the received signal and to synchronize. 

Thus, only software listeners might be successful. By 
recording the transmitted signal on both directions the 
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external input. 



A.B-, 




FIG. 4: Simulation results for A'^ = 35 indicate that syn- 
chronization in (a, 0) is achieved only above the line. Similar 
results were obtained also for larger values of A'^. 



listeners can collect information and analyze the data in 
order to find first the private keys. Once the keys are 
discovered, he can use them in order to synchronize with 
the partners following the strategy proposed in Eq. 

We first demonstrate a simple algebraic way of cal- 
culating K'^, Kg for TV = 2, assuming the partners 
are already synchronized, — xf = xt- In one 
time step, the transmitted signals on both directions, 
T^'^ = KA,Bf{xt) + (1 - KA,B)f(,xt-i), consists of 
four unknown variables: Ka,b, f{xt), f{xt-i). On the 

A B 

next time step, two new equations emerge: T^^^ = 
KA,Bf{xt+i) + (1 — KA,B)f{xt). These equations consist 
of previously three unknown variables Ka,b, f{xt) and 
one new unknown variable f(xt+i). Therefore by adding 
more time steps we are adding more equations than new 
variables. Actually for = 2, three time steps supply 
6 equations for the 6 unknown variables, and the keys, 
Ka,b, can be revealed. 

For N > 2 the number of required equations to decode 
the keys of length N is 6(iV — 1). Note that the obtained 
equations are nonlinear, but at least for N = 2 and 3 we 
found that the solution is unique. In case the solution is 
unique also for > 3, an unproven result, the complexity 
of finding the keys is similar to the complexity of solving 
6{N — 1) linear equations. 

In order to avoid the synchronization of a software lis- 
tener we propose to use time- dependent filters. We re- 
place the private keys every few time steps, while the syn- 
chronization of the partners is not damaged. This tech- 
nique of key-swapping is exemplified below for iV = 2. A 
necessary condition to maintain the synchronization pro- 
cess is that the partners use commutative filters. Hence, 
the filters cannot be changed every iteration, since the 
input signals consist of the mixed output signals of three 
sequential time steps, Eq. pT|) . 

We suggest to use the same keys for two successive 
iterations and stop transmission in the third iteration. 
In the third step we have to increase the self-feedback 
to its maximum k = 1 to compensate for the missing 
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(16) 
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where — 0- We found stable synchronization for 

this three steps protocol, where in each period new ran- 
dom keys are selected. The regime of synchronization 
(e, k) was found to be similar to the case with the ab- 
sence of filters. 

Generalizing the time-dependent random filters for 
N > 2 requires that the rate of the keys-swapping has 
to be greater than 2 and less than 6(iV — 1) iterations 
for communication, and at least A^ — 1 iterations with no 
communication, k = 1 IJ], in order to change the keys. 
As the key swapping consists of to < 6(A^ — 1) iterations, 
in each periodicity of the protocol the listener is left with 
6{N — 1) — TO unrevealed parameters of the key. Simula- 
tions of the swapping protocol for A^ up to few hundreds, 
indicate that synchronization is achieved similarly to the 
case with the absence of filters. 

Note that using time-dependent filters eliminates any 
reconstruction based on Taken's theorem, since the trans- 
mitted signal is a discontinuous function of the chaotic 
variables, as was suggested in Q . 

Our results show that indeed two way is better than 
one way, and mutual is superior to unidirectional cou- 
pling. This superiority is guaranteed even for the sim- 
plest chaotic maps and linear filters. An attractive possi- 
ble application based on this phenomenon is public chan- 
nel encryption protocols. Although a listener knows the 
parameters of the chaotic dynamics of the partners and 
the transmitted signals he cannot reveal the private fil- 
ters and cannot synchronize. 

In the last few years, there were attempts to use cou- 
pled chaotic lasers [1, [H, [H, [l3| and coupled neural 
networks [H, [3| for cryptography. Unidirectional cou- 
pling was used as a private-key system, and mutual cou- 
pling for the construction of public-channel cryptogra- 
phy. 0,[iil,|2^. 

The general proof that there is no advantage of mutual 
over unidirectional coupling in the case of no filters, Eqs. 
©-((Si), is in question in the case of mutually coupled 
lasers. It is not obvious that enhancing the signal can 
be achieved without adding unavoidable noise, moreover 
subtracting a signal (negative self-coupling in Eq. Q) is 
in question if possible at all. The subtraction of a signal 
from itself requires that the lasers will be synchronized 
not only with their amplitudes but also with their opti- 
cal phase. It is yet unknown if the optical phase is syn- 
chronized in mutually or unidirectionally coupled chaotic 
lasers and its accuracy. Hence there is still the possibility 
that even for lasers with static filters, the answer to our 
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initial question raised above is positive. Note also that 
even with the lack of filters, a public channel protocol for 
synchronized chaotic lasers is possible. The messages are 
modulated on the chaotic transmitted signals both way 
and recovered based on another phenomenon known as a 
mutual chaos pass filter [7|. 

The research is supported in part by the Israel Science 
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